@dclarke: "# /opt/adbs/sbin/named -u named -c /etc/opt/adbs/named/named.conf -4 -d 2 -f -g -n 1 
27-Jun-2013 03:43:27.243 starting BIND 9.9.3-P1 -u named -c /etc/opt/adbs/named/named.conf -4 -d 2 -f -g -n 1
27-Jun-2013 03:43:27.246 built with 'build=sparc-sun-solaris2.10' 'host=sparc-sun-solaris2.10' 'prefix=/opt/adbs' 'enable-threads=yes' 'disable-openssl-version-check' 'enable-ipv6' 'with-randomdev=/dev/urandom' 
... huge bucket of option here ...
.
.
.
27-Jun-2013 03:43:27.248 
27-Jun-2013 03:43:27.250 BIND 9 is maintained by Internet Systems Consortium,
27-Jun-2013 03:43:27.251 Inc. (ISC), a non-profit 501(c)(3) public-benefit 
27-Jun-2013 03:43:27.253 corporation.  Support and training for BIND 9 are 
27-Jun-2013 03:43:27.255 available at <url>
27-Jun-2013 03:43:27.257 
27-Jun-2013 03:43:27.259 found 1 CPU, using 1 worker thread
27-Jun-2013 03:43:27.260 using 1 UDP listener per interface
27-Jun-2013 03:43:27.268 using up to 4096 sockets
27-Jun-2013 03:43:27.271 Registering DLZ_dlopen driver
27-Jun-2013 03:43:27.274 Registering SDLZ driver 'dlopen'
27-Jun-2013 03:43:27.276 Registering DLZ driver 'dlopen'
27-Jun-2013 03:43:27.296 decrement_reference: delete from rbt: 1005a9b08 .
27-Jun-2013 03:43:27.341 initializing DST: no engine
27-Jun-2013 03:43:27.343 exiting (due to fatal error)
# 
initializing DST: no engine ? 
That seems somewhat of a mystery to me and so I used truss to see this : 
12636/1:         0.7352 stat("/opt/adbs/ssl/lib/engines/libpkcs11.so", 0xFFFFFFFF7FFFE850) Err#2 ENOENT
Well I have no idea how to generate libpkcs11.so in my openssl engines area. 
Is this really needed ? 
This build of OpenSSL 1.0.1e was fully tested and passed all tests so I am thinking
that an option to the build of bind is the issue here.   Probably "with-pkcs11" .
If I don't have that option am I totally shafted for DNSSEC ? 
am I maing sense here ? 
Dennis "
    @dclarke: "<quote>
Did a quick rebuild and yes Sir, runs like a charm. 
Not sure why I bothered with "with-pkcs11" given that I have never used
it before ... regardless, that little experiment gave me a brief moment of concern.
Thank you .. my DNS servers are up to date and all is well. 
dc"
{'source': 'USENET', 'other_information': '{"reply_count": 1, "forum_name": "comp.protocols.dns.bind.20140828.mbox"}', 'file': 'data/output/usenet-comp.protocols.parquet'}